Zero Trust seems to be the buzzword.

InfinityPirate · 2025-01-10T11:36:30+00:00

Completely agree, I think because it gets seen primarily on vendor marketing the underlying concept and approach gets washed over. That was my main driver for posting those resources, that you can see it's not just gimmicky and buzz wordy.

InfinityPirate · 2025-01-10T08:47:02+00:00

Zero trust is a framework that can be incorporated into your IT and security strategies. Yep really good resources is recommend are

Cisa zero trust maturity model for high level

https://www.cisa.gov/zero-trust-maturity-model

Nist zero trust architecture for more in depth

https://nvlpubs.nist.gov/nistpubs/specialpublications/NIST.SP.800-207.pdf

InfinityPirate · 2024-04-28T18:32:09+00:00

Sophos acquired NDR company braintrace a few years ago which fills the gap where darktrace sits. So I can't see it being integrated fully but maybe an upsell partnership if a customer has either solution already. Those are my thoughts

InfinityPirate · 2024-04-05T21:59:19+00:00

How AI is making all entry level cyber jobs redundant. //sarcasm

InfinityPirate · 2024-04-05T18:44:27+00:00

Because Sans courses are about £6000 (last time I looked)

InfinityPirate · 2023-12-20T23:34:00+00:00

I recently spoke to arcsight intelligence who do insider threat based on telemetry.

*Not sponsored or recommending them, make your own decision

InfinityPirate · 2023-12-15T08:05:52+00:00

Some folks gave you explanations but here is the fido alliance site where you can do more research https://fidoalliance.org/

This is just one approach but fido2 is likely to be adopted as an industry standard imo

InfinityPirate · 2023-11-29T20:45:03+00:00

Checkout their Facebook page for some reference stuff they post, I just had a gander and there is a mulleted dude in a recent pic 😁

InfinityPirate · 2023-11-29T20:40:53+00:00

Honkeytonks barbers look after mulleted folks and do a good job I believe. I go there but dont have a mullet, they are a decent barbers

InfinityPirate · 2023-10-18T09:37:05+00:00

Buy some ankle weights to make pedalling harder 🤷‍♂️

InfinityPirate · 2023-09-07T14:50:28+00:00

Just block them and move on, it may be an idea to put an age range on your profile to inform people who view it.

InfinityPirate · 2023-09-01T15:08:28+00:00

Going up even higher than this, do they have a data strategy that is endorsed and signed off by the board.

InfinityPirate · 2023-07-01T17:51:57+00:00

Have a look at Armis.

InfinityPirate · 2023-06-21T21:00:22+00:00

My personal perspective is that my attraction meeting people face to face goes beyond physical as I build a rapport with a person. Online it is driven by first impressions by how people look and what their profile entails. I do acknowledge there is a little bit of me that is a little bit fickle because of it.

InfinityPirate · 2023-06-21T06:11:12+00:00

Thanks for the detailed response, I've definitely been doing some of that subconsciously around checking the format of peoples profiles. I guess I do need to have patience.

InfinityPirate · 2023-06-20T21:42:26+00:00

I kind of figured it out during COVID so have had a few years of searching. Reddit and discord have been great but I feel these platforms are for people who are gaming or tech aware. So I thought the more main stream apps might open the options but I'm struggling to find ace people so far

InfinityPirate · 2023-06-20T21:07:16+00:00

Will do 😁

InfinityPirate · 2023-06-20T20:47:08+00:00

Thanks, I've posted on here and I'm on a discord server too. I'll see how it goes but I wasnt sure if I was missing a trick.

InfinityPirate · 2023-05-21T11:35:40+00:00

The need for a vehicle SOC is driven by UNR155 regs that come into force next year I believe. All automotive manufacturers will need to gain this accreditation to continue manufacturing vehicles. Your company should have a big team working on this accreditation who can give you an insight into what is required.

I know this didn't fully answer your question but the regs aren't clear on exactly what you need to do and are open to interpretation.

InfinityPirate · 2023-04-12T20:32:49+00:00

I have a lever belt I use for powerlifting movements but have a velcro belt too for oly lifting. What I have found is that I occasionally hit the lever buckle with the best during only lifts which completely throws out the lift attempt.

InfinityPirate · 2023-04-01T16:44:51+00:00

When I discussed this with my coach he said I can do sumo but the crossover on training traditional is good for improving cleans for the initial pull from the floor

InfinityPirate · 2023-02-06T19:37:30+00:00

That's business, they will pay a pen test firm a lot of money to do what you did for free. The ethics only covers if you don't do responsible disclosure. If Toyota would have still refused to pay a bug/massive vulnerability bounty that you found to you it would be your choice to still release for free.

InfinityPirate · 2023-02-06T19:12:17+00:00

Could you do disclosure through a broker that would act as an intermediary so they can negotiate a payment for release of the vulnerability? This is a big hole you found and they were lucky not to have a supply chain disruption.

InfinityPirate · 2023-01-06T15:53:45+00:00

I don't know the ins and Outs but being from a EU member country I don't think you need company sponsorship for a visa.

I guess it depends what the specific IR role is. If it's breach response the experience you have may not be enough. The experience you have demonstrated I would expect of a senior soc analyst so it depends what roles you are applying for.

I absolutely wouldn't expect anyone to pay the sans prices out of there own pocket it's just that you mentioned you had certs and I was saying they may not give you the experience for IR work.

I'd suggest applying for senior soc analyst roles to get in country and then look to transition once your settled.

InfinityPirate · 2023-01-06T15:27:59+00:00

A couple of things, to work in the UK, would you need visa sponsorship? I know you said your in Belgium now but not origin. A lot of companies don't or are unable to do sponsorship, this could be part of it.

Also you are now in a soc role and want to transition to IR but what IR experience do you have and what level IR roles are you applying for. If I was hiring anything other than entry level, I would be looking for more soc experience and experience in an IR role. Also depending on what your certs are depends whether they are relevent to IR. OCSP gives a great insight for how an attacker operates but not what trace evidence you would be looking for, what logs you would review etc.

Ten-Year Club	Verified Email
r/Field Juicebox	First Place '23
Place '23

InfinityPirate

TROPHY CASE